Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
File:                     wWD3u-jXY2d3YUisuMTKNflr6Vc.mft (raw, json)
Hash identifier:          JYfDFY6f+LaWIuWjZYAIJtIur9aiJ7Bf3MrmXG9I5hs=
Subject key identifier:   BC:28:AD:0B:89:C7:A3:36:CD:E3:B8:74:F4:BF:96:FB:42:2E:90:A3
Authority key identifier: C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
Certificate issuer:       /CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Certificate serial:       019776E5F6EC536BBED8ED1269B66FDA5879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
Manifest number:          1566
Signing time:             Mon 16 Jun 2025 04:01:11 +0000
Manifest this update:     Mon 16 Jun 2025 04:01:11 +0000
Manifest next update:     Tue 17 Jun 2025 04:01:11 +0000
Files and hashes:         1: wWD3u-jXY2d3YUisuMTKNflr6Vc.crl (hash: FtPkJhkG/4Q9vArOkDNzgv0TYWRa6XemHvNNYmelEPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:f6:ec:53:6b:be:d8:ed:12:69:b6:6f:da:58:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c160f7bbe8d76367776148acb8c4ca35f96be957
        Validity
            Not Before: Jun 16 04:01:11 2025 GMT
            Not After : Jun 17 04:01:11 2025 GMT
        Subject: CN=bc28ad0b89c7a336cde3b874f4bf96fb422e90a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:d4:15:ba:1c:cc:4b:a6:21:69:c3:4a:28:
                    15:16:95:71:5e:9a:cb:a0:41:8c:aa:08:48:95:a3:
                    9a:74:6b:87:c5:22:ee:24:0f:24:b8:19:26:b6:95:
                    56:09:6c:95:95:f0:17:b5:39:90:18:f3:27:af:9b:
                    54:c0:5a:37:81:d5:71:7f:2e:4a:72:1a:bf:e6:9a:
                    fb:90:17:2b:08:f6:78:b0:88:62:39:17:1f:c3:b2:
                    d7:5b:db:89:0c:36:05:18:b1:d3:fb:5f:de:9f:6e:
                    a9:81:b7:89:fc:6f:7e:d2:aa:e4:10:92:7c:02:2e:
                    0b:6c:44:fc:9f:8b:e8:13:0d:e2:9a:93:38:2c:a2:
                    11:12:0e:dd:6c:ee:84:29:a0:a4:51:ba:26:62:ed:
                    9f:97:a3:af:55:c0:8d:07:61:e1:d2:2e:3e:96:37:
                    5c:dc:16:ae:84:f7:61:fb:d3:f8:a4:b9:80:bc:f4:
                    36:61:57:9f:e6:39:31:e6:05:76:55:9d:60:1e:a0:
                    50:8e:02:15:91:6a:1f:4e:d1:a3:ba:3f:fb:44:25:
                    24:d2:e4:61:1a:f2:f6:bc:31:12:81:ac:5b:4b:75:
                    6d:75:75:cd:6c:9c:8d:0a:27:7d:09:fd:c0:79:ff:
                    30:41:8b:c5:dd:48:f9:58:91:46:99:9d:a9:f7:bb:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:28:AD:0B:89:C7:A3:36:CD:E3:B8:74:F4:BF:96:FB:42:2E:90:A3
            X509v3 Authority Key Identifier:
                keyid:C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b1:b3:83:ae:0d:eb:05:58:93:c2:93:f3:4a:9b:db:83:42:
         07:2b:8b:7e:58:68:c6:86:1b:48:96:de:4f:ae:55:ee:35:53:
         15:51:2c:cb:68:13:df:a9:c4:7e:52:b0:c1:a3:98:6f:2b:f0:
         f3:37:84:af:92:82:b1:dc:89:38:6a:4c:b2:fe:df:c8:d3:02:
         82:cf:b9:2b:11:8f:40:d6:3d:ab:b2:58:9a:fb:6a:a5:8c:40:
         a6:a4:e8:0b:f1:a1:e0:56:4a:12:3e:fd:47:bf:b0:5f:a7:68:
         ee:63:e4:b0:92:c7:1b:fa:76:60:b5:a5:ef:19:f0:f7:8c:4c:
         04:ae:80:e2:2a:e7:ed:3c:08:a1:57:9d:ca:1c:21:03:91:c6:
         78:92:79:d8:47:26:8d:dc:48:a9:e3:6e:19:5a:d9:6a:b4:b1:
         e3:88:87:14:d2:37:c8:9c:41:f1:75:ec:8d:3f:d7:47:e4:0f:
         23:f2:dd:a5:aa:a0:72:58:d1:04:8b:8d:18:d4:1c:c3:b8:ed:
         e8:8a:0b:cb:d0:32:d1:cb:02:69:9e:e5:d0:dd:d7:5e:0f:eb:
         8b:e5:32:3d:76:17:dd:ab:74:96:2c:20:b9:ee:e6:1e:8d:d4:
         b4:ef:9c:f7:75:78:9b:1f:7d:93:c7:b0:86:7f:49:e7:b6:91:
         d0:39:27:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25fbsU2u+2O0SabZv2lh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNjBmN2JiZThkNzYzNjc3NzYxNDhhY2I4YzRjYTM1Zjk2
YmU5NTcwHhcNMjUwNjE2MDQwMTExWhcNMjUwNjE3MDQwMTExWjAzMTEwLwYDVQQD
EyhiYzI4YWQwYjg5YzdhMzM2Y2RlM2I4NzRmNGJmOTZmYjQyMmU5MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3nUFboczEumIWnDSigVFpVxXprL
oEGMqghIlaOadGuHxSLuJA8kuBkmtpVWCWyVlfAXtTmQGPMnr5tUwFo3gdVxfy5K
chq/5pr7kBcrCPZ4sIhiORcfw7LXW9uJDDYFGLHT+1/en26pgbeJ/G9+0qrkEJJ8
Ai4LbET8n4voEw3impM4LKIREg7dbO6EKaCkUbomYu2fl6OvVcCNB2Hh0i4+ljdc
3BauhPdh+9P4pLmAvPQ2YVef5jkx5gV2VZ1gHqBQjgIVkWofTtGjuj/7RCUk0uRh
GvL2vDESgaxbS3VtdXXNbJyNCid9Cf3Aef8wQYvF3Uj5WJFGmZ2p97sOZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLworQuJx6M2zeO4dPS/lvtCLpCjMB8GA1UdIwQY
MBaAFMFg97vo12Nnd2FIrLjEyjX5a+lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NjFhODMtODEwYy00M2FlLWFjMjUt
NjRlMmJkNjE5MzE4LzEvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80NjFhODMtODEwYy00M2FlLWFjMjUtNjRlMmJkNjE5MzE4
LzEvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrGzg64N
6wVYk8KT80qb24NCByuLflhoxoYbSJbeT65V7jVTFVEsy2gT36nEflKwwaOYbyvw
8zeEr5KCsdyJOGpMsv7fyNMCgs+5KxGPQNY9q7JYmvtqpYxApqToC/Gh4FZKEj79
R7+wX6do7mPksJLHG/p2YLWl7xnw94xMBK6A4irn7TwIoVedyhwhA5HGeJJ52Ecm
jdxIqeNuGVrZarSx44iHFNI3yJxB8XXsjT/XR+QPI/LdpaqgcljRBIuNGNQcw7jt
6IoLy9Ay0csCaZ7l0N3XXg/ri+UyPXYX3at0liwgue7mHo3UtO+c93V4mx99k8ew
hn9J57aR0Dkn+A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:51:52 2025 by rpki-client